Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa
File: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (raw, json)
Hash identifier: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=
Subject key identifier: 98:BC:96:D0:F6:F7:CD:23:0B:9C:9D:8B:70:7B:EA:70:BB:4A:BC:C1
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 0194266B1E6B2B23C4A598168DE74423B589
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa
Signing time: Thu 02 Jan 2025 09:49:01 +0000
ROA not before: Thu 02 Jan 2025 09:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207480
IP address blocks: 2a06:1e82::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:1e:6b:2b:23:c4:a5:98:16:8d:e7:44:23:b5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 2 09:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98bc96d0f6f7cd230b9c9d8b707bea70bb4abcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:e3:53:16:3d:14:e6:c8:ab:0b:18:17:64:
13:93:ab:78:1a:7d:91:a7:dd:6e:ee:1a:41:7d:71:
5c:54:83:d7:e3:d9:7d:d7:9a:61:30:4f:8e:56:25:
5e:f6:8a:cf:07:77:65:4c:8c:30:1e:e0:8e:dc:fd:
bd:0e:54:f3:6d:51:a0:a7:0f:4b:32:7b:88:4e:0a:
7a:88:4b:24:2d:34:22:eb:47:04:9e:66:c3:1c:dc:
5d:c2:63:66:ed:8e:f4:44:5c:e1:03:7b:b5:6a:0e:
cd:5d:ca:56:43:98:07:b0:a0:3d:89:a8:bb:e9:21:
7e:b9:93:0c:fb:3a:d3:e6:92:16:b6:1d:45:33:6c:
2e:6f:14:8c:f7:b2:9d:82:17:93:51:19:f1:bf:ee:
74:6d:17:92:a9:c2:f5:33:36:38:e9:d0:e1:98:67:
4f:fd:11:54:cd:3f:86:7b:7f:cd:37:d5:cf:f0:23:
b7:0c:c6:cb:ac:cc:06:4a:45:e9:99:c1:3c:16:64:
34:88:92:1f:d3:f9:3e:97:96:99:4c:c3:6a:c8:38:
c4:bd:36:4d:9f:ab:10:d9:6f:1b:78:13:e3:33:63:
6c:e4:f6:b8:ad:6f:fe:69:7b:42:0e:65:7a:17:8a:
4a:d2:9b:fd:15:51:06:43:70:be:6f:c2:29:85:81:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:96:D0:F6:F7:CD:23:0B:9C:9D:8B:70:7B:EA:70:BB:4A:BC:C1
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1e82::/44
Signature Algorithm: sha256WithRSAEncryption
07:8a:32:3d:f6:ab:ca:17:71:38:fe:b4:0e:9a:39:57:c4:37:
02:85:ce:a7:83:ee:44:80:71:6b:9a:32:64:53:84:0b:09:ba:
33:15:af:6c:0f:08:3e:14:2c:8f:e1:a3:95:d4:84:f6:b6:54:
75:df:f8:18:24:5b:df:31:6a:b9:e8:51:41:ce:75:05:48:df:
f7:07:88:21:8d:e0:34:04:31:0f:71:46:7d:c4:1c:b2:87:6a:
69:81:8a:5b:e9:3d:93:39:d9:78:b7:7c:8d:18:75:47:c5:26:
37:10:3f:34:9f:32:f4:5e:d6:2f:4d:5d:03:1f:73:61:8e:6a:
e5:3f:2e:6b:6f:67:32:29:fd:81:90:a5:52:7d:67:63:f7:08:
5a:68:7d:44:21:82:64:6c:75:6e:66:1f:88:00:5e:65:6c:3f:
b4:56:92:fc:7d:b0:88:b9:5a:71:a1:54:16:b1:e7:2a:55:ee:
ad:28:e1:52:cd:ba:c3:27:6f:0e:59:b1:51:a7:8c:8d:e8:b1:
bd:88:ab:61:60:2d:40:30:ba:5b:bd:1f:8f:07:49:10:c8:c7:
87:3e:22:64:20:33:87:d1:f4:56:72:ac:18:16:87:7a:dd:2f:
4c:a7:50:89:b8:9f:d6:e7:66:29:b5:12:a7:b5:ce:4f:07:54:
0a:34:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:25 2025 by rpki-client